Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33322d3334203d3e20323730363638.roa
File:                     323830343a366638633a3a2f33322d3334203d3e20323730363638.roa (raw, json)
Hash identifier:          0R2PVZEXCIO6SxoUtxLAa6tipYLPiQBFqSKpN2wH6WI=
Subject key identifier:   0B:59:33:11:AD:65:B8:0C:65:34:2F:C6:90:19:A4:D5:BF:34:BF:C4
Certificate issuer:       /CN=72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222
Certificate serial:       07C3C2FE0BE57EFC8ED52098FC6CB9C02980CD21
Authority key identifier: 72:B1:58:5A:B7:E1:4F:C0:BE:6B:5D:2C:62:E5:F2:8D:C3:E5:72:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33322d3334203d3e20323730363638.roa
Signing time:             Thu 03 Aug 2023 13:44:19 +0000
ROA not before:           Thu 03 Aug 2023 13:39:19 +0000
ROA not after:            Thu 01 Aug 2024 13:44:19 +0000
asID:                     270668
IP address blocks:        2804:6f8c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c3:c2:fe:0b:e5:7e:fc:8e:d5:20:98:fc:6c:b9:c0:29:80:cd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222
        Validity
            Not Before: Aug  3 13:39:19 2023 GMT
            Not After : Aug  1 13:44:19 2024 GMT
        Subject: CN=0B593311AD65B80C65342FC69019A4D5BF34BFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:48:40:c7:57:df:d7:bb:fe:a2:75:ef:4a:
                    47:b0:96:24:02:ad:2d:d4:e5:51:06:ec:f9:25:51:
                    b7:3b:ae:95:4c:49:ba:a7:b6:82:ba:75:7b:0c:95:
                    46:17:dc:78:c5:1c:c2:05:7f:ff:96:16:0d:2b:97:
                    5d:ec:e6:ac:df:1c:24:e0:16:15:8e:a3:50:a6:c6:
                    1f:aa:c1:01:3b:b6:73:3a:67:cd:a1:10:58:c4:9e:
                    c2:00:d4:92:1e:c7:55:16:e3:33:0d:b6:bd:37:12:
                    b4:18:18:6f:71:80:b7:66:e9:d6:af:3f:52:b8:54:
                    97:fd:13:2e:15:3d:e1:37:88:73:94:be:24:c3:24:
                    69:2e:02:3f:46:dc:3c:c0:70:3b:64:5f:9e:ea:3a:
                    ba:1d:46:29:f6:73:78:2c:fc:64:1f:62:18:5f:22:
                    4f:5d:7d:ed:d4:5a:e2:d2:c9:1a:fb:e8:06:e7:f1:
                    0a:bd:ea:e2:47:3b:09:d4:15:00:70:e1:c9:e6:f4:
                    34:87:4d:a3:d3:f8:8b:b3:d1:76:cd:85:aa:a7:d3:
                    3f:f6:41:11:2c:72:e4:51:72:4e:2a:84:86:42:8d:
                    5f:a7:df:6b:af:a2:5c:04:42:d5:ea:2b:82:a4:7d:
                    02:81:38:d0:c0:dc:1a:51:04:74:c5:c6:21:d9:db:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:33:11:AD:65:B8:0C:65:34:2F:C6:90:19:A4:D5:BF:34:BF:C4
            X509v3 Authority Key Identifier:
                keyid:72:B1:58:5A:B7:E1:4F:C0:BE:6B:5D:2C:62:E5:F2:8D:C3:E5:72:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B1585AB7E14FC0BE6B5D2C62E5F28DC3E57222.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zWWhpk9kpHz6wWmhFnA8Ni48LYJ2BErQnnZ4iBpjjng/0/323830343a366638633a3a2f33322d3334203d3e20323730363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:10:9e:ee:11:0a:42:6e:45:e7:a0:fb:41:e5:a4:89:00:07:
         7d:fc:00:c7:80:7a:0a:51:d9:04:76:aa:0c:cb:b5:04:65:91:
         8f:40:62:e0:5d:b7:b2:b3:f4:40:8b:ce:3f:63:eb:93:a2:11:
         c5:a0:2c:68:bd:32:0f:b1:64:0f:24:3b:00:dd:c4:be:35:97:
         f1:14:c3:ce:47:4e:7a:dc:8b:8f:aa:c0:70:ff:db:14:bc:ea:
         33:4f:72:fd:12:cd:32:90:d0:2a:7a:99:5c:b5:e0:5b:d4:86:
         da:20:bf:67:00:25:d5:14:68:93:37:4d:59:2b:32:16:00:5f:
         83:ca:67:88:4f:90:c5:33:8a:dd:5f:22:41:c7:ce:25:ce:ae:
         b2:85:66:d8:99:04:46:79:ee:5c:94:98:49:4e:46:d7:bf:b0:
         fa:df:1c:0b:17:87:7e:02:53:0e:c2:75:0e:56:78:c1:cb:4d:
         c7:8d:fe:f4:79:88:33:96:e5:74:30:6b:da:ba:df:e5:31:2c:
         d8:ea:84:ab:71:8f:de:bb:b1:21:c3:96:93:c6:04:a8:55:54:
         43:6d:7a:e9:c2:32:45:3f:19:ce:2c:a0:f7:00:ef:a9:4f:f0:
         bf:bd:70:dd:31:21:3f:6e:f6:6e:01:14:16:b0:9a:30:44:bc:
         c3:38:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org